OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

1. Primer Have been recently and 3 6 0 Nirvan Team DQ430 happy to participate in a encryption vendors of the annual General meeting, the results of openssl is also out of touch lively, maybe really in order to DH brother sent the gift, bitter us these security operations. Thanks to Shawn for...

HP UCMDB Browser information disclosure Vulnerability(CVE-2 0 1 5-6 8 6 2)-vulnerability warning-the black bar safety net

Affected system: HP HP UCMDB Browser the 4.02 Description: CVECAN ID: CVE-2 0 1 5-6 8 6 2 HP UCMDB Browser is to access UCMDB data of the lightweight Web client. HP UCMDB Browser 4.02 prior version there is a security vulnerability. A remote attacker could exploit this vulnerability can obtain...

GPS satellite positioning platform vulnerability disaster, the user location information in an emergency-vulnerability warning-the black bar safety net

Recently, the press exposure a lot of plays through the GPS positioning device trace abduction. By on the market on some of the GPS positioning device research, found that these GPS positioning system background using a common set of procedures, its Cloud Platform on the presence of multiple...

This year“white hat”are dug up? Breakdown 2 0 1 5 in those affected world of vulnerabilities-vulnerability warning-the black bar safety net

About the past 2 0 1 5 years network security on thin ice year: the countless fatal vulnerability is discovered, be repaired or be caring people use...fortunately, in the global white hat hacker's efforts, many fatal vulnerabilities are to catch the bad guys discover before it has been...

Honeywell Midas gas detector is exposed to serious vulnerabilities, and then to industrial safety Alarm bell-vulnerability warning-the black bar safety net

! Well-known high-tech manufacturing company Honeywell recently released a firmware update package to fix Midas gas detector of two high-risk vulnerabilities. This is a turnover of 3 0 0 the multi-billion-dollar diversified technology and manufacturing company in the world has its business...

More than one! Dell and a root certificate vulnerability be exploited by hackers-exploit-warning-the black bar safety net

This month 2 5, we discussed Dell eDellRoot root certificate vulnerability, the same problem again today is exposed: in some Dell system, found a second self-signed root certificate DSDTestProvider, and also comes with a private key. ! This morning, the micro-step online security analysis of clou...

PNG image processing library libpng exposed vulnerability-a vulnerability warning-the black bar safety net

! According to the report: image processing library libpng recently exposed vulnerabilities, currently has a preliminary fix vulnerabilities. Currently the main problem is the libpng the popularity of the range is too wide: operating systemthe browser any with generating a thumbnail associated...

iBackDoor: the suspected back door, the impact of the iOS app a high risk of code-bug warning-the black bar safety net

! Recently, FireEye Mobile Security researchers discovered embedded into the iOS app in the suspected“back door”behavior mobiSage advertising in the library, and these applications are from the App Store. The researchers will be the potential of the back door called iBackDoor, allowing hackers...

muymacho---dyld_root_path exploit analysis-exploit warning-the black bar safety net

muymacho is an exploit tool. Exists in Mac OS X 10.10.5 in dyld bug can be used to extract right to the root. In the latest chief stone of EI Capitan 10.11 in has been patched. This is an interesting bug, the use of the process is also a lot of fun. The present article aims to introduce the use o...

Baidu Department of Applied WormHole vulnerability details analysis-vulnerability warning-the black bar safety net

Baidu moplus SDK is called a wormhole（Wormhole of vulnerability was reported after the“a ripple”, it is implanted into 1 4 0 0 0 app, these apps have close to 4 0 0 0 A are by Baidu produced. The vulnerability is a vulnerability reporting platform black bar safety net vulnerability bulletins foun...

“Broken days”: the Xen virtualization platform virtual machine escape vulnerability analysis-vulnerability warning-the black bar safety net

Xen is the leading open source virtualization platform, supporting the Amazon cloud, Ali cloud, etc. many well-known public cloud service infrastructure, therefore, ensure that the virtualization infrastructure security has important significance. Ali cloud security vulnerability research team...

SAP Afaria product exposed a series of serious vulnerabilities that affect a large number of mobile device-bug warning-the black bar safety net

Afaria is the German SAP software company developed a mobile device management MDM solutions that are currently on the market the most popular MDM solutions, there are about 6 3 0 0 a enterprise which manages 1 billion 3 0 0 million of the mobile device. ERPScan is specifically responsible for th...

Yokogawa multiple products stack buffer overflow vulnerability(CVE-2 0 1 5-5 6 2 7)-vulnerability warning-the black bar safety net

Affected system: yokogawa Exaopc = R3. 7 2. 0 0 yokogawa CENTUM CENTUM VP Entry yokogawa CENTUM CENTUM VP yokogawa CENTUM CENTUM CS 3 0 0 0 Entry yokogawa CENTUM CENTUM CS 3 0 0 0 yokogawa CENTUM CENTUM CS 1 0 0 0 Description: CVECAN ID: CVE-2 0 1 5-5 6 2 7 Yokogawa Japan Yokogawa Electric...

Camera 3 6 0 applications privacy data breach analysis-vulnerability warning-the black bar safety net

A lot of popular Android apps leak privacy data. We found another popular Google Play app,“Camera 3 6 0 Ultimate”,not only for the user's photos are optimized, but also inadvertently leaked the private data that can allow a malicious user is not authenticated access to the user Camera 3 6 0 cloud...

Firefox bookmarks extensions apps Pocket: vulnerability mining not so difficult-vulnerability warning-the black bar safety net

The Pocket application's developers recently fixed a few leaked data a vulnerability, hackers may be from the server to obtain WEB Services, internal IP address, as well as more sensitive information. Pocket profile Pocket formerly known as Read it Later, as the name suggests, is an online...

BlackHat topic analysis: analysis of BGP hijacking exploit-vulnerability warning-the black bar safety net

BGP hijacking in 2 0 0 8 years defcon conference once involved, however, in 2 0 1 5 year's blackhat has been selected as the subject, visible the seriousness of the problem, frozen three feet, a cold, BGP hijacking issues to organizations around the world work together to solve it. 0×0 0 what is ...

The popular DNS server software BIND exposed serious DoS vulnerability-vulnerability warning-the black bar safety net

BIND is the world's most popular DNS server software. The Internet Association, the ISC published Vulnerability CVE-2 0 1 5-5 4 7 7 patch, this is an affected BIND server to a serious denial of service vulnerability. BIND denial of service vulnerability A week ago, the Internet Association, the I...

CVE-2 0 1 5-3 1 1 3 analysis-vulnerability warning-the black bar safety net

Fireeye in its 6-month 2 3 day post“Operation ceeinject. Gen! g Wolf”are discussed in a cyber-espionage group, known as APT3, in Adobe Flash using a 0day vulnerability. Unit42 also use the UPS tracking APT3 group, it was originated in China the invasion of the toolset, with the earlier of 0day...

Android Stagefright high-risk vulnerability: a preliminary study-vulnerability warning-the black bar safety net

Order Shocked Stagefright exposed significant vulnerabilities can result in remote code execution, even clockwork MMS, it is possible the invasion of the user mobile device. This sounds but a rare case of a large vulnerability., as security personnel, nature good steak with a steak insider...

Apple Yosemite operating system local to mention the right to: EXP length of not more than a Twitter-bug warning-the black bar safety net

Apple's latestoperating systemYosemite was broke a local mention the right vulnerability, the vulnerability is by the German security researcher Stefan Esser discovered and has been in OS X 10.10-10.10.4 version of the test is successful. If you want to fix the vulnerability, please upgrade to th...

PHPCMS user login SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

0x00 description Before manning in the vulnerability of the time, suddenly found a normal landing does not go up, then help with the next phpcms login process. After feeling this process looks like some of the questions, carefully looked under, did not think really a 0day 0x01 vulnerability...

Smart home vulnerabilities is how to be hackers-use-vulnerability warning-the black bar safety net

! Smart Home is today's favourites, however in people only focus on the home of intelligent and humane, hackers are will look to put in a smart home, everything can be exploitable. From the application vulnerability Data show that in a variety of home automation equipment and the help of sensors,...

The phone did not leave the body but by hacking the lock to blackmail you don't understand the Apple“security vulnerability”-vulnerability warning-the black bar safety net

Yesterday reported that Mr. Xu transfer of second-hand Apple phone, the A 9 0 after the guy borrowed test machine of two-time with a cloud account bound, Mr. Xu phone, and extortion 3 0 0 Yuan unlocking fee. Smartphones bring to our lives a lot of convenience and even lifestyle changes. However,...

flash vulnerabilities:CVE-2 0 1 5-3 1 1 3 and CVE-2 0 1 5-3 0 4 3 comparison-vulnerability warning-the black bar safety net

Before we talk about Flash Player out-of-band data out-of-band problem, which consists of a Adobe release number for APSB-1 5-1 4-in. Now the Flash Player update to 1 8. 0. 0. 1 9 4 in. Our current defect analysis revealed: CVE-2 0 1 5-3 1 1 3 impact similar to the CVE-2 0 1 5-3 0 4 3 in. Are in...

IBM Security AppScan 9.0.2 remote code execution vulnerability-vulnerability warning-the black bar safety net

IBM Security AppScan Standard is the United States, IBM company a Web application security testing tool. The tool is available in the application development life cycle for automated static and dynamic security vulnerability scanning. The vulnerability is based on the Windows OLE Automation array...

IdeaCMS built Station system universal vulnerability affects thousands of sites-vulnerability warning-the black bar safety net

IdeaCMS based on the ASP+MSSQL/ACCESS technology development from 2 0 0 8 released in the first version since, every year, we are on a program to do a larger version of the update, so far has released six major versions. IdeaCMS in a simple, efficient, flexible, easy to use, open source, template...

iPhone vulnerability an SMS makes the phone crash-vulnerability warning-the black bar safety net

iPhone latest vulnerability need only a string of character text message can let the recipient of the phone crash. It is reported that received the SMS on the phone Messages application will crash, eventually cause the phone to reboot. It is reported that the vulnerability exists in most of the i...

Iphone SMS magic: one SMS to make the iPhone crash to restart-vulnerability warning-the black bar safety net

Apple mobileoperating systemappears in a new bug, which can lead to any iPhone to crash and restart. This problem is caused by a simple text message caused. When the Messages received, one particular by character of the string, the iPhone Message app will continue to crash. And if you accept the...

Wordpress is continuously explosion two stored XSS, the impact of the latest version-bug warning-the black bar safety net

! /Article/UploadPic/2015-4/201542811437550.jpg The official Wordpress in 4 on 2 1, released new version 4. 1. 2, wherein the mentioned fixes a serious memory typexssvulnerabilities. Soon someone shows vulnerability details. Thisxssstill appear in the wordpress comments, but the problem is caused...

Tencent's wechat is shaking vulnerability, the use of the phone number cause account lost can't get back in!-- Theory of of personal information security and protection-vulnerability warning-the black bar safety net

This article was written today at 2 p.m. much, did not immediately issued because the cock to the clouds first feedback about the cock always felt the clouds are very T, it is desirable to have an account, but the cock is too water, but did not pass the audit, it may present cock of the expressio...

Many well-known hotel chains, high-end brand hotels there are serious security vulnerabilities, massive open room information stored in the disclosure risk-vulnerability warning-the black bar safety net

Well-known Inn orange, Jinjiang Inn, the super eight, pudding; high-end hotel the MARRIOTT Hotel Group, MARRIOTT, Ritz Carlton, Starwood group, Sheraton, Le Meridien, W Hotels, Intercontinental Hotel Group, Holiday Inn, etc there is a serious security breach, the tenant Open House information at ...

Gold Partner: security researchers discovered Flash 0day vulnerability with BEDEP virus there is a close Association-vulnerability warning-the black bar safety net

2 0 1 5 year at the beginning of the Adobe Flash sequential burst more0dayvulnerability, and has not been repaired when it waslarge-scale malicious usethe. Recently, Trend Micro security researchers in Adobe 0day vulnerabilities in the tracking survey, found BEDEP series virus with the Adobe Flas...

Millet smart cameras small ants there is a remote command execution vulnerability-vulnerability warning-the black bar safety net

! t0167153064b2673d18. png Vulnerability description: Small ants Camera application management program the presence of a remote command execution vulnerability through the web interface with root privileges to execute arbitrary system commands without any web permissions, now the official latest...

Friends news router discovery DNS hijacking vulnerability-vulnerability warning-the black bar safety net

Security researchers have found that the Friends of the hearing at least one model of the router is found that the presence of DNS hijacking vulnerability that can be remotely change the DNS settings, hijack the traffic. Ethical hackerEthical Hackerresearch group of Todor Donev said, the...

Vulnerability alert: well-known Forum system vBulletin commonly used SEO plugin VBSEO there is a serious security vulnerability-vulnerability warning-the black bar safety net

vBulletin team recently to all their customers warning of its plug-in VBSEO there was a serious security vulnerability. VBSEO for vBulletin and very popular third party seo modules, worst of VBSEO official already in the last year to stop updating this plug-in, that no one can exploit to provide...

Phone to grab votes APP“train up”to the presence of high-risk vulnerabilities in the user's personal information and other data leaks-bug warning-the black bar safety net

Data 3 6 0 patch-day vulnerability response platform shows that the domestic popular mobile phone to grab votes APP“train up”to the presence of high-risk vulnerabilities, including millions of tickets, ticket orders user ID number, username, plaintext password, detailed ticket information and oth...

Samsung KNOX remote silent installation vulnerabilities in-depth analysis of the report-vulnerability warning-the black bar safety net

Vulnerability sources 1 1 In mid-May, the Samsung phone is a foreign security researchers exposed a serious security vulnerability,the vulnerability affects the Galaxy S5,S4,S4 mini,Note 4,Note3 and Ace 4 supports knox, a full line of Samsung phones, part of the GalaxyS5, and the Note 4 has been...

Cool official silent install apk features background the presence of high-risk vulnerabilities(demo custom machine is how in your phone silently installed)-bug warning-the black bar safety net

Cool Demo junk software is how to through your mobile phone to silently install Suction fee software what is going on. You charge less? Detailed description: Cool a operation and maintenance improper shell. ! ! ! ok See under background: http://auth.coolyun.com ! Background PUSH features APK sile...

Mac EFI is exposed a major security vulnerability by Thunderbolt devices to spread malicious programs-vulnerability warning-the black bar safety net

Next week, Germany at the Chaos Communication Congress Security Conference, a researcher Trammell Hudson will present a new method, through the unique production of Thunderbolt devices in the Mac EFI boot firmware in the injection almost impossible to not remove the Bootkit virus. The exploits of...

Free open source photo album Piwigo <= v2. 6. 0 SQL injection vulnerability 0day-a vulnerability warning-the black bar safety net

Piwigo is the world's most famous free open source photo album system by PHP+MySQL architecture. Since the framework build easy, by domestic and foreign developers favor recently, Piwigo = v2. 6. 0 burst critical 0day vulnerability. Vulnerability causes,Piwigo photo album system/piwigo/picture. p...

The N-point database Direct Download-vulnerability warning-the black bar safety net

hostdate%23host%2 0% 2 3%20date%2 3 1 9 6. mdb...

A simple little program vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Body Description: readfile. exe is the vulnerability of the program, it reads the c:\overflow. txt file, and the contents of the file in the dialog form pop up. Analysis process: First step: In overflow. txt text input 1 2 3 4 Using readfile. exe opened, program executed properly. In the text inp...

Bash vulnerability again evolution: a buffer overflow resulting in remote arbitrary command execution-vulnerability warning-the black bar safety net

In recent days, the“Shellshock”Bash vulnerability appeared it is to the security industry Put a heavy bomb, more and more manufacturers and black and white hats have added to the analysis of the camp which, at the same time also one after another burst more for the Bash vulnerability, the apparen...

Broken shell vulnerability patches to bypass analysis-vulnerability warning-the black bar safety net

During the day busy with vulnerability response, Server, test and fix, the vulnerability affects the scope of Statistics and other things, until the night finally have time to analyze. Official first patch main changes: 1, The parameter types and the number of constraints, from the annotations ca...

phpcms avatar upload vulnerability and the subsequent impact-vulnerability warning-the black bar safety net

Summer vacation writing articles, recent blog didn't dry, issued to entertainment. In response to the love of pot Mramydnei, the line masters of Somali pirates, the fd cattle（/fd's call for the establishment of the parsec team, and fellow teachers over the years of my education, I want to write...

Trend Micro found the PayPal Android vulnerability-vulnerability warning-the black bar safety net

Recently, Trend Micro discovered the PayPal Android app has two vulnerabilities that may be attacker to conduct phishing（Phishing attacks to steal Alipay authentication information. The first vulnerability: an output component Activity Android app has several important components, one of which is...

Android new vulnerability exposure: hack may fake and authentic applications-vulnerability warning-the black bar safety net

Ticker 7 on 3 0 September morning news, on Tuesday released a study on the display, the Google Android operating system has a security vulnerability that can allow a hacker to fake a trusted formal application, thereby hijacking the user's smartphone or tablet. The security company Bluebox Securi...

Days thaw letter is not timely help users install the latest security patches-bug warning-the black bar safety net

Currently found in Hua shield firewall basically didn't patch a lot of days thaw letter of vpn and firewall-no patch. Through the abroad for an engine to view-day financial device 1. 2w Station, no desire to write tools to batch validate. The following content is excerpted from days financial...

ThinkPHP the Ubb tag vulnerability to read arbitrary contents of the-vulnerability warning-the black bar safety net

Brief description: ThinkPHP the Ubb tags, there is a code highlighting function, that satisfies: xxx/c odeorp hpxxx/p hpwhen it comes to the middle of the xxx to read, and highlight, the xxx is the path, and the non-specific code, as in Figure 1,The input path, when the file exists, the return is...

PHPYUN cloud talent system background CSRF Getshell-a vulnerability warning-the black bar safety net

phpyun background no authentication token, by the CSRF directly getshell First, from the background getshell start. The web site's configuration file,/plus/config.php using double quotes to do the key value, which leads to security issues. We can put php code to write into the double quotes insid...